2b698aa3cd7e195f699b8b5b2ca0617f70a2fc484081d0a7f26596e38b3f0e68

Analysis

user interaction
yes
max time kernel
36s
max time network
37s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 02:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
nfa-loader-latest.exe
Size 1.4MB
Sample260722-da734axfkd
SHA256 2b698aa3cd7e195f699b8b5b2ca0617f70a2fc484081d0a7f26596e38b3f0e68
MD5 f89c0a1ccfeac11adcd7f592ebdf4944
SHA1 cf1e01989c16c61a4bbef2d0905ce039382c38f2
SHA512 a3164ba08dc1641552ef9b10e4bdb0702b0231249202e04c9ba825a035266900cc17154c963d7cd1b9bad7aa4e2e29b7fdd6e1a5f5ad5824127dd549b6686d93
SSDEEP 24576:ZCAunPk/G8g3UWMex8SQX0sQJSgp85Js0e+8f2/PMjEHf8mJy5xL:ZCAwUe3EU311sUj45Ja
TLSH
T1B56533785FACA5E1D388BDF113E812343D26B4502CC15E94A00F9DDEABE05A565C3E7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan upx

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	nfa-loader-latest.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/2396-0-0x00007FF63F850000-0x00007FF63FC9F000-memory.dmp	upx
behavioral2/memory/2396-184-0x00007FF63F850000-0x00007FF63FC9F000-memory.dmp	upx
behavioral2/memory/2396-205-0x00007FF63F850000-0x00007FF63FC9F000-memory.dmp	upx

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4144	msedgewebview2.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
2396	nfa-loader-latest.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2396	nfa-loader-latest.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 2396 wrote to memory of 4144	2396	nfa-loader-latest.exe	89
PID 4144 wrote to memory of 6088	4144	msedgewebview2.exe	90
PID 4144 wrote to memory of 4536	4144	msedgewebview2.exe	91
PID 4144 wrote to memory of 4536	4144	msedgewebview2.exe	91
PID 4144 wrote to memory of 4536	4144	msedgewebview2.exe	91
PID 4144 wrote to memory of 4536	4144	msedgewebview2.exe	91
PID 4144 wrote to memory of 3260	4144	msedgewebview2.exe	92
PID 4144 wrote to memory of 3920	4144	msedgewebview2.exe	93
PID 4144 wrote to memory of 3920	4144	msedgewebview2.exe	93
PID 4144 wrote to memory of 3920	4144	msedgewebview2.exe	93
PID 4144 wrote to memory of 1500	4144	msedgewebview2.exe	94
PID 4144 wrote to memory of 1500	4144	msedgewebview2.exe	94
PID 4144 wrote to memory of 1500	4144	msedgewebview2.exe	94
PID 4144 wrote to memory of 1500	4144	msedgewebview2.exe	94
PID 4144 wrote to memory of 1500	4144	msedgewebview2.exe	94

C:\Users\Admin\AppData\Local\Temp\nfa-loader-latest.exe
"C:\Users\Admin\AppData\Local\Temp\nfa-loader-latest.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious behavior: RenamesItself
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=nfa-loader-latest.exe --webview-exe-version=1.0.3 --user-data-dir="C:\Users\Admin\AppData\Local\com.loader.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz,RemoveRedirectionBitmap --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2396.4920.11577256050788263657 /pfhostedapp:d7d8ebaa6af7da94611e4154f8c327ee95232fe0
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4144
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.loader.app\EBWebView /prefetch:4 /pfhostedapp:d7d8ebaa6af7da94611e4154f8c327ee95232fe0 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x198,0x7ffe61ee5fd8,0x7ffe61ee5fe4,0x7ffe61ee5ff0
    3⤵
    PID:6088
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.loader.app\EBWebView" --webview-exe-name=nfa-loader-latest.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1752 --field-trial-handle=1756,i,16357155891606237241,4754399704170217531,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:d7d8ebaa6af7da94611e4154f8c327ee95232fe0
    3⤵
    PID:4536
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.loader.app\EBWebView" --webview-exe-name=nfa-loader-latest.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2180 --field-trial-handle=1756,i,16357155891606237241,4754399704170217531,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:d7d8ebaa6af7da94611e4154f8c327ee95232fe0
    3⤵
    PID:3260
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.loader.app\EBWebView" --webview-exe-name=nfa-loader-latest.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2388 --field-trial-handle=1756,i,16357155891606237241,4754399704170217531,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:d7d8ebaa6af7da94611e4154f8c327ee95232fe0
    3⤵
    PID:3920
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.loader.app\EBWebView" --webview-exe-name=nfa-loader-latest.exe --webview-exe-version=1.0.3 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3352 --field-trial-handle=1756,i,16357155891606237241,4754399704170217531,262144 --enable-features=MojoIpcz,RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:d7d8ebaa6af7da94611e4154f8c327ee95232fe0 /prefetch:1
    3⤵
    PID:1500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 fcf39509e373ffe4ef7ba6caf61cde4e5288a220bd4a0bccb4f0bcba408a24e6
MD5 dba26b7cfc057772f6a75edb431e4e5a
SHA1 c96ff2110c3ed43655deba16531378e82d8a6db1
SHA512 779326e032c444fcb62a7ee473ec2134c4d4e3da0e4a15bee918fa510d07e500b26ef3d30ecb9e5c430340e353a295eaf8afdcc4d80f3091220ac3c831bd29c7
TLSH
T1E9D0122372120234C01030B31816B3090501CE0F811A40055C2C859D1A044600D16D41
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 46d70c1b31ed629f9d14b81f160026b335a9d755a045c61371b65b38774cfe27
MD5 9ab9f092f068b1b528d9c9f0ebb49899
SHA1 ccc951d54a7bc21d40ad71c298f32777ade2f4c7
SHA512 0e264ff781ec8b1ed80f7b1822856296b75a3d4ff4b42e70c1ad0d9a31aa08d2892e73403051e1e76f91422dcb76c8bf8987019ef76474acf138ed42799481f3
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 3f49c235f93bdc02cf540b8dff5f9d22b313a4a3706e46b701f4a94b4b41ed7a
MD5 05a579c6d8d944ede3b633d4f2a5221b
SHA1 48728a62b00cd322173ff6c71d6d54706738250c
SHA512 37a2fd358f7c7ad58fbab7df19c1d2b3cc071cfd36b11a669ad44040a8c4f3761a4cd262917e40d7afafe5e1afd872787e827571ff99624a258eb63df9ccdc23
TLSH
T11DA002634A510407C207137015D791C472304C34866BA69148E5106499E17415245510
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598e1d.TMP

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe598e1d.TMP
Size 48B
SHA256 8ada02c659fd020b03cffebf54b3794b3745883eba7f56a0ab430c4615632a17
MD5 07fe5a1a77cc0a7e56689feb5450b813
SHA1 4e9a91b77adbe5d0c2aafdbe22117586e20a56e0
SHA512 60a05f38d89ea1d0e590e802e6f22916a3f60848c68a6a7e9cdff0f61c4619f322662d4c45c3dd6572c8b8090a48b2ed348dc3630d15e01b853ed439216a38e6
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Local State
Size 15KB
SHA256 c67ef8a94c23ce2582de72e86dca94b74d1b9f57124e0165f8bd626b5aaf3e7a
MD5 fb2ff514d44ba348a51b9b3fd0d1d07c
SHA1 a5c38fa9ef49b2d50ffc928d6ef81ac41fb12657
SHA512 0e1a50c7d1fd0a1a9b3800ed9f515c91c58966ec22fe14ad4dec7c82cfdf1185df4d49f69206a014f9cbc0e9705eabbd110fba9ef11189c2f6a62db069378639
SSDEEP 384:yRsrv+89zHqlDNP9oid6NBShyfdL3IWpN6:trv+4UNbd8t3I0N6
TLSH
T12C72BF33E4789A779DF69406B48A7F073B7860A7A6C24EA4D8D81F4C81CB0CA2307D53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Local State
Size 2KB
SHA256 cb43ecd8f4b1bb44f5b7c59a05a03d2b4ee22beb903bbc0d6419bdd1631260a4
MD5 5cfbaeae99bd8d27ae2930675c5376cc
SHA1 67975123f2928c38450d2b96538b81e35bb72849
SHA512 754109e97beca12dfbbd43c66a9b4e0fe74de3f55f9f183c69605d92f5243e88641b683f651c02d1c737e71281ea4ec13409a19d7d7eec8be8491837608b843e
TLSH
T193518473A8609A7B9DE6860A7C463F239A7180A6EB531F5596CC1B0800D760D2747C77
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Local State
Size 3KB
SHA256 15a9b766e15db4fa2553935d5fbe3325554a4f8de057ac2c83327a91cb5f5517
MD5 b6fe76175b3b2ee72dc6966790accca9
SHA1 5bce85a4992857d88bace0e9de2f8ecc4f3a7a31
SHA512 35e0d5cb6244f57ac3da749f8a39e89848b10e8a921aaa1808e683ff27683d7b2cba9cd9b4fe2591b6cfda3b8f77ecd94a238cf154cfa93538d82cbe717e03bc
TLSH
T11F71847BA8A0A97B4DE789067C853B16A7A14067EA963F95D6EC0F0C01D734C1353C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe593ca2.TMP

Path C:\Users\Admin\AppData\Local\com.loader.app\EBWebView\Local State~RFe593ca2.TMP
Size 1KB
SHA256 b4ca0bf4cac931fa2a77d42872d2367f08ab106b2f5ce15896227dd060bdbed8
MD5 602844bf8a4ce1ae5649a0aabe43447a
SHA1 fa5df6f40813e1f278715e1a6e7ef6e23acd63f5
SHA512 24984cfc41c7721019ccdb29ca92e4bdaaaae0c88761bd5b627adcda3acb3b09fdb04337d7c297a4412813d494ddb317b742aeb1fd2c54e1b03a78b3b70eb56d
TLSH
T13B3154B6D8E05A76ACC6510B3841BF9B6E7140AA97124F0462CD4B0C41D760DAB2BC76
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1500-91-0x00007FFE81BB0000-0x00007FFE81BB1000-memory.dmp

Download

memory/2396-184-0x00007FF63F850000-0x00007FF63FC9F000-memory.dmp

Download

memory/2396-205-0x00007FF63F850000-0x00007FF63FC9F000-memory.dmp

Download

memory/2396-0-0x00007FF63F850000-0x00007FF63FC9F000-memory.dmp

Download

memory/4536-202-0x000001CDB0BB0000-0x000001CDB0C58000-memory.dmp

Download

memory/4536-27-0x00007FFE81BB0000-0x00007FFE81BB1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads